Homebridge Airly 2

About Homebridge Airly 2 is a plugin for the Homebridge platform that fetches air quality data from the Airly sensor network and exposes it as a native sensor in the Home app (HomeKit) on iPhone, iPad, and Mac. The project was born out of the need to monitor air quality without buying additional hardware. All you need is a free Airly API key and a working Homebridge installation. Key Features Real-time measurements - PM2.5, PM10, and AIRLY_CAQI index Zero dependencies - no external libraries, only built-in Node.js modules HomeKit integration - full support for the Home app and automations UI configuration - Homebridge Config UI X support Input validation - coordinate and parameter validation Unit tests - 53 tests, 88% code coverage Version 0.2.0 (December 2025) The latest version introduces several improvements: ...

December 25, 2025 · 2 min · Tomasz Wyderka

Homebridge Airly 2 v0.2.0 - Security, Validation & Tests

A month after the last update, I’m releasing version 0.2.0 of the homebridge-airly2 plugin. This is the biggest update in years, focused on security, code quality, and stability. What’s New in v0.2.0? Security and Validation The previous version trusted configuration data without verification. Now all parameters are thoroughly validated: Geographic coordinate validation: // Latitude: -90 to 90 // Longitude: -180 to 180 if (latitude < -90 || latitude > 90) { throw new Error('Invalid latitude'); } MaxDistance validation: ...

December 25, 2025 · 2 min · Tomasz Wyderka

Homebridge Airly 2 is back

After a couple of years I finally shipped an update to Homebridge Airly 2. The plugin once again works smoothly with the Airly API and the latest Homebridge and Node.js releases. The rewrite also removed third-party libraries that were frequently reported as vulnerable, so the dependency tree is now much cleaner. If you rely on HomeKit automations, you can keep tracking air quality without installing extra sensors. A Deeper Look: Zero Dependencies and Enhanced Security Let’s dive into what “removed third-party libraries” means for you. The previous version of the plugin relied on request, a popular but now-deprecated library. It’s no longer actively maintained, which in the software world can lead to unpatched security vulnerabilities and stability issues down the road. ...

November 18, 2025 · 2 min · Tomasz Wyderka